Entry and propagation
Compromise of the build system and insertion of code into Orion updates released between March and June 2020.
Targets
Government agencies, critical infrastructure and private organizations using Orion.
Impact
Covert access, credential theft, lateral movement and access to email and cloud environments.
Defense
Inventory Orion versions, rotate secrets, rebuild trust and review identity and cloud logs.